CVE-2018-7683

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

VendorProductVersions
Micro FocusSolutions Business Manager 11.4Solutions Business Manager versions prior to 11.4

References

Timeline

Published
Jun 21, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-76857.8The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later CVE-2018-76867.5Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.CVE-2018-76877.8The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a bCVE-2018-76886.5A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sourCVE-2018-76896.5Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to CVE-2018-76906.5A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitationCVE-2018-76916.5A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitationCVE-2018-76926.1Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.CVE-2018-76988.1An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the useCVE-2018-77008.8DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specifyCVE-2018-77016.5Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the autheCVE-2018-77029.1SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to ar
CVE-2018-7683: High severity, CVSS 7.5 | Vulnix